mv643xx_eth: don't include cache padding in rx desc buffer size
If NET_SKB_PAD is not a multiple of the cache line size, mv643xx_eth
allocates a couple of extra bytes at the start of each receive buffer
to make the data payload end up on a cache line boundary.
These extra bytes are skb_reserve()'d before DMA mapping, so they
should not be included in the DMA map byte count (as the mapping is
done starting at skb->data), nor should they be included in the
receive descriptor buffer size field, or the hardware can end up
DMAing beyond the end of the buffer, which can happen if someone
sends us a larger-than-MTU sized packet.
This problem was introduced in commit 7fd96ce47f
("mv643xx_eth:
rework receive skb cache alignment", May 6 2009), but hasn't appeared
to be problematic so far, probably as the main users of mv643xx_eth
all have NET_SKB_PAD == L1_CACHE_BYTES.
Signed-off-by: Saeed Bishara <saeed@marvell.com>
Signed-off-by: Lennert Buytenhek <buytenh@marvell.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
2467ab9590
commit
530e557ab2
|
@ -656,6 +656,7 @@ static int rxq_refill(struct rx_queue *rxq, int budget)
|
||||||
struct sk_buff *skb;
|
struct sk_buff *skb;
|
||||||
int rx;
|
int rx;
|
||||||
struct rx_desc *rx_desc;
|
struct rx_desc *rx_desc;
|
||||||
|
int size;
|
||||||
|
|
||||||
skb = __skb_dequeue(&mp->rx_recycle);
|
skb = __skb_dequeue(&mp->rx_recycle);
|
||||||
if (skb == NULL)
|
if (skb == NULL)
|
||||||
|
@ -678,10 +679,11 @@ static int rxq_refill(struct rx_queue *rxq, int budget)
|
||||||
|
|
||||||
rx_desc = rxq->rx_desc_area + rx;
|
rx_desc = rxq->rx_desc_area + rx;
|
||||||
|
|
||||||
|
size = skb->end - skb->data;
|
||||||
rx_desc->buf_ptr = dma_map_single(mp->dev->dev.parent,
|
rx_desc->buf_ptr = dma_map_single(mp->dev->dev.parent,
|
||||||
skb->data, mp->skb_size,
|
skb->data, size,
|
||||||
DMA_FROM_DEVICE);
|
DMA_FROM_DEVICE);
|
||||||
rx_desc->buf_size = mp->skb_size;
|
rx_desc->buf_size = size;
|
||||||
rxq->rx_skb[rx] = skb;
|
rxq->rx_skb[rx] = skb;
|
||||||
wmb();
|
wmb();
|
||||||
rx_desc->cmd_sts = BUFFER_OWNED_BY_DMA | RX_ENABLE_INTERRUPT;
|
rx_desc->cmd_sts = BUFFER_OWNED_BY_DMA | RX_ENABLE_INTERRUPT;
|
||||||
|
|
Loading…
Reference in a new issue